Sync Repo-README from project files

Repo-README.-.md

@@ -1,4 +1,4 @@
-<!-- codex-wiki-sync:48aefc1df880b4c3af0cead5 -->
+<!-- codex-wiki-sync:acf75350b24f197bce28310a -->
 
 > Mirrored from `/mnt/DATA/git/govoplan-access/README.md`.
 > Origin: `repository`.
@@ -15,8 +15,10 @@ The repository contains the extracted access seed implementation under
 `src/govoplan_access/backend`. Session, API-key, and password helper services,
 interactive auth routes, and the legacy administration router are already
 owned here and exposed through core compatibility imports while the staged
-extraction continues. The legacy admin service/governance helpers are also
-owned here, and the transitional administration WebUI lives under `webui/src`
+extraction continues. Access-side admin service helpers remain here for users,
+groups, roles, system accounts, sessions, API keys, and tenant access
+enforcement. Governance-template CRUD and materialization live in
+`govoplan-admin`. The transitional administration WebUI lives under `webui/src`
 as `@govoplan/access-webui`. Live access ORM models are defined here while
 retaining their historical table names; tenant records live in
 `govoplan-tenancy`, governance templates in `govoplan-admin`, audit logs in
@@ -44,6 +46,9 @@ This module will own:
 - access administration WebUI route contributions
 - access-owned migrations
 
+The governance-template routes under `/admin/system/governance-templates` are
+contributed by `govoplan-admin`; access must not register those routes.
+
 `govoplan-access` depends on `govoplan-tenancy`; the registry loads tenancy
 before access for authenticated platform composition.